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Abstract — Using Cloud computing user can store their data secure without load of local user computer. And this feature 
additionally should be cable enough to provide user to maintain the cloud storage, as it is if same is maintained in the local, 
where no consideration required verifying the data integrity. On top by enabling and having public audit for cloud storage, 
which cab check the integrity of data. By audit finding the data corrupted is a huge task. To make the integrity of the data in 
cloud server Cloud Service Provider (CSP) should be able to have replica of user data. We here propose a secure cloud storage 
system supporting privacy preserving public auditing and having replica of the data which supports to retrieve the lost data. We 
further extend our result to have more efficient cryptographic algorithm to maintain the replica of data. Shown the 
performance and security analysis of the proposed schemes are provably secure and highly efficient. 

Index Terms — Third-party auditor (TPA), replica, cloud service provider (CSP) 



1. INTRODUCTION 

Cloud computing is that the delivery of computing 
services over the web. Cloud services permit people and 
businesses to use package and hardware that are managed by 
third parties at remote locations. Samples of cloud services 
embrace on-line file storage, social networking sites, webmail 
and on-line business applications. The cloud computing model 
allows access to data and pc resources from anyplace that a 
network affiliation is on the market. Cloud computing gives a 
shared pool of resources, as well as knowledge cupboard 
space, networks, pc process power and specialized company 
and user applications. Services can be scaled bigger or minor 
and use of a service is measured and customers are billed 
accordingly. The cloud computing service models SaaS 
(software package as a Service), PaaS (Platform as a 
Service) and IaaS (Infrastructure as a Service). During a 
software package as a Service model, a pre-made application, 
in conjunction with any needed software package, package, 
hardware and network square measure provided. In PaaS, 
Associate in Nursing package, hardware, and network square 
measure provided and therefore the client installs or develops 
its own software package and applications. The IaaS model 
provides simply the hardware and network; the client installs 
or develops its own operative systems, software package and 
applications. Cloud computing has been developed by the 
[6]U.S. National Institute of Standards and Technology 
(NIST). 

Using cloud storage, users will remotely store their 
knowledge and luxuriate in the on-demand high-quality 
applications and services from a shared pool of configurable 
computing resources, while not the burden of native 
knowledge storage and maintenance. Moreover, users ought to 
be able to simply use the cloud storage as if it's native, without 
concern regarding the requirement to verify its integrity. [2] 
Thus, enabling public audit ability for cloud storage is of 
important so users will resort to a third-party auditor (TPA) to 
examine the integrity of outsourced knowledge and be concern 
free. To firmly introduce a good TPA, the auditing method 
mustn't bring new vulnerabilities toward user knowledge 
privacy and introduce no extra on-line burden to user. Cloud 



computing provides flexibility to users and Users pay the 
maximum amount as they use Users don't ought to originated 
the massive computers however the operation is managed by 
the Cloud Service supplier (CSP) the user offer their 
knowledge to CSP; CSP has management on (the knowledge 
the information) the user has to confirm the information is 
correct on the cloud Internal (some worker at CSP) and 
external (hackers) threats for data integrity CSP would 
possibly behave unreliably. 

As enabling public audit ability for cloud storage, using 
storage that we can check the integrity of the data. In this 
auditing it's difficult to find the data. So before it auditing has 
to take the replica of our original data integrity for our cloud 
user by cloud server provider. We propose a secure cloud 
storage system supporting privacy-preserving public auditing 
and taking replica of the data which supports to retrieve the 
lost data. 

2. RELATED WORKS 

2.1 Privacy-Preserving Public Auditing for Secure Cloud 
storage 

[l]Cloud computing is that the long unreal vision of 
computing as a utility, wherever knowledge data owners will 
remotely store their knowledge within the cloud to fancy on- 
demand high-quality applications and services from a shared 
pool of configurable computing resources. Whereas 
knowledge outsourcing relieves the data owners of the burden 
of native knowledge storage and maintenance, it additionally 
eliminates their physical management of storage 
responsibleness and security, that historically has been 
expected by each enterprises and people with high service- 
level necessities. So as to facilitate fast preparation of cloud 
knowledge storage service and regain security assurances with 
outsourced knowledge responsibleness, economical ways that 
change on-demand knowledge correctness verification on 
behalf of cloud knowledge data owners got to be designed. 
During this article we tend to propose that in public auditable 
cloud knowledge storage is ready to assist this emerging cloud 
economy become totally established. [4]With public 
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auditability, a sure entity expertly expert and capabilities 
knowledge data owners don't possess may be delegated as an 
external audit party to assess the danger of outsourced 
knowledge once required. Such associate degree auditing 
service not solely helps save knowledge computation 
resources however additionally provides a clear however cost- 
efficient technique for knowledge owners to realize trust 
within the cloud. We tend to describe approaches and system 
necessities that ought to be brought into thought, and 
description challenges that require to be resolved for such a in 
public auditable secure cloud storage service to become a 
reality. 

2.2 Multiple -Replica Provable Data Possession 

Most storage systems trust replication to extend the 
provision and sturdiness of knowledge on non trustworthy 
storage systems. At present, such storage systems give no 
robust proof that multiple copies of the information are 
literally hold on. Storage servers will to form it appear as if 
they're storing several copies of the information, whereas 
actually they solely store one copy. We tend to address this 
disadvantage through [8]multiple-replica obvious knowledge 
possession (MR-PDP). 

A provably-secure theme that permits a consumer that 
stores t duplicates of a go in a storage system to verify through 
a challenge -response protocol that (a) every distinctive 
duplicate may be created at the time of the challenge which (b) 
the storage system uses t times the storage needed to store one 
replica. MR-PDP extends previous work on knowledge 
possession proofs for one copy of a go in a client/server 
storage system. Victimization MR-PDP to store t replicas is 
computationally way more economical than employing a 
single-replica PDP theme to store t separate, unrelated files 
(e.g., by encrypting every file one by one before storing it). 
Another advantage of MR-PDP is that it will generate 
additional replicas on demand, at very little expense, once a 
number of the prevailing replicas fail. 

2.3 Dynamic Provable Data Possession 

In order to form positive that integrity of the info within the 
Cloud, [3] particularly the dynamic files which might be 
updated on-line, we have a tendency to propose Associate in 
Nursing improved dynamic obvious knowledge possession 
model: It divides file into blocks, generates a tag for every 
block, computes a hash price for every tag, uses tags to make 
sure the integrity of the file blocks, and uses hash values to 
make sure the integrity of the tags. Having concern with 
Compare with previous works, it reduces the procedure and 
communication quality from login to constant. Though 
consumer has to store some secret values which can produce 
some extra storage expense, it solely takes up concerning 
zero. 02% of the initial file size. 

2.4 Above the Clouds: A Berkeley View of Cloud Computing 

[7]Cloud Computing, the awaiting dream of computing as a 
utility, has the potential to transform a huge part of the IT 
industry, making software even more attractive as a service 
and shaping the way IT hardware is designed and purchased. 
Developers with innovative ideas for fresh Internet services no 
longer require the large capital outlays in hardware to deploy 
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their service or the human expense to operate it. They need not 
be concerned about over provisioning for a service whose 
popularity does not meet their predictions, thus wasting costly 
resources, or under provisioning for one that becomes wildly 
popular, thus lost potential customers and revenue. Moreover, 
companies with large batch-oriented tasks can get results as 
quickly as their programs can scale, since using 1000 servers 
for one hour costs no more than using one server for 1000 
hours. This elasticity of resources, without paying a premium 
for large scale, is extraordinary in the history of IT 

3. AUDITING FOR SECURE CLOUD STORAGE 

In the Proposed System, we are implementing the secure 
system namely Privacy preserving auditing with replica of 
data. [5]In this system, first the Data Owner will register with 
the Cloud Service Providers. During the registration phase the 
Public and Private will be generated for the Data Owner. The 
Data Owner has to provide their Private Key while updating 
their data in the Cloud Server. Using Merkle Hash Tree 
Algorithm the Cloud Server Split the in to batches. The Cloud 
Server will allow the Trusted Party Auditor (TP A) to audit the 
data that was Stored in the Cloud Server as requested by the 
User. The TPA will also audit multiple Files also. 

• The user is allowed to access the data only by 
providing the Public and Private key components By 
allowing the Trusted party Auditor to audit the data 
will increase the Trustworthiness between the User 
and Cloud Service Providers. 

• By using (MHT) Merkle Hash Tree Algorithm the 
data will be audited via multiple level of batch 
auditing Process 

• As Business Point of view, the Company's 
Customers will be increased due to the Security and 
Auditing Process. 

• Uses homomorphic authenticator (HA) 

• Pseudo Random Function (PRF) provide a random 
mask that we can use 




"Fig.l" The architecture of cloud data storage service 
3.1 Algorithm 

These algorithm are (KeyGen, SigGen, GenProof, 
VerifyProof, MHT) 

• KeyGen: A algorithm for key generation that is run 
by the user to setup the scheme 
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SigGen: Verification metadata that are generated by 
the user, that consist of signatures, MAC or Other 
information used for doing auditing 
GenProof: Cloud server runs to generate a proof of 
data storage correctness 

VerifyProof: TPA runs to audit the proof of data from 
the cloud server 

MHT: (Merkle hash tree ) It is used to divide the data 
as a block. 



4. EXPERIMENTAL SETUP & RESULTS 



user— KeyGen 



Public key (sk)S 
Secret key (pk) 





Block 1 


Block 2 



sk 



user SigGen 











Block 1 


Block2 




Block n 









o 1 a 2 



Selected blocks in challenge 
1 



(csp)- 



GenProof 



Aggregate authenticate* 



(ISSN : 2277-1581) 
1 May 2014 

Masked linear combination of requested blocks 
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"Fig.2" Setup and Audit 



User generates public and secret parameters 

A code is generated for each file block 

The file blocks and their codes are transmitted to the 

cloud 

TPA sends a challenge message to CSP 

It contains the position of the blocks that will be 

checked in this audit 

CSP also makes a linear combination of selected 
blocks and applies a mask. Separate PRF key for 
each auditing. 

CSP send aggregate authenticator & masked 
combination of blocks to TPA 
Compare the obtained Aggregate authenticator to the 
one received from CSP 
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Reference 
number 


Author 


Title of the paper 


Techniques used 


Result 


Disadvantage 


[1] 


V.Deepa, 
K.Rajakumari 


Privacy Preserving 
Public Auditing for 
Secure Cloud 
Storage-Replica 


MHT, 

homomorphic 
authenticator 


Replica of the 
data 


Create availability of the 
data to user by cloud 
server. 


[2] 


C. Wang, Q. 
Wang, K. Ren, 
& W. Lou 


Privacy-Preserving 
Public Auditing for 
Secure Cloud sorage 


homomorphic 
authenticator 


Audit the data 


We can't retrieve the data 
if any of data integrity lost. 


[4] 


Feifei Liu, 
Dawu Gu, 
Haining Lu 


An improved 
dynamic provable 
data possession 
model 


Hashing 
Technique 


Improve dynamic 
file 


It reduces the 
computational and 
communication complexity 
from logn to constant. 
Although client needs to 
store some secret values 
which may create some 
additional storage expense 


[8] 


M. Armbrust, 
A. Fox, R. 
Griffith, A.D. 


Above the Clouds: 
A Berkeley View of 


MHT(Merkle 
Hash Tree 


The audit can 
above to do 
multiple user who 


Improve the ability of 
Batch Auditing. 
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Joseph, R.H. 
Katz, A. 
Konwinski, 


Cloud Computing 


Algorithm) 


are all login the 
cloud. 




[9] 


O. Khan, R. 
Burns, G. 
Ateniese, R. 
Curtmola 


Multiple-Replica 
Provable Data 
Possession 


ReplicaGen,TagBl 
ock 


Multiple copies of 
data 


Create on-line burden of 
the copy. 



5. EVALUATION 

In addition to Aggregate Authenticator, a linear combination 
of file blocks re received by TPA 

/''' = EiGJ 
Vj are random number 
mj are file blocks 

TPA might be able to infer the file blocks, if it has 
many linear combinations of the same block 
Pseudo Random Function (PRF) provide a random 
mask that we can use 

6. CONCLUSION 

In this paper we propose a Replica of data in cloud 
server that is Secure. We use homomorphic linear 
authenticator and random masking to make sure TPA would 
learn data content that are stored in cloud server during the 
auditing. Addition to it Metadata concept help more 
guarantee to data content knowledge by TPA, Based on the 
Audit if a file is corrupted it will be replaced by the Replica 
that is stored in the Cloud server using MHT Algorithm in- 
order transversal by the Server. 
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